Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEYO1uiJgenDSQbxoZY5cL_lReM.roa
File: wEYO1uiJgenDSQbxoZY5cL_lReM.roa (raw, json)
Hash identifier: YQ7iSrRtF2upxnU1yz/BlD56vp+CZqWv7IwJB/Rc71w=
Subject key identifier: C0:46:0E:D6:E8:89:81:E9:C3:49:06:F1:A1:96:39:70:BF:E5:45:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A1D52BDA289F7338F5F494411862ECFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEYO1uiJgenDSQbxoZY5cL_lReM.roa
Signing time: Tue 04 Oct 2022 07:10:45 +0000
ROA not before: Tue 04 Oct 2022 07:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:d5:2b:da:28:9f:73:38:f5:f4:94:41:18:62:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 4 07:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0460ed6e88981e9c34906f1a1963970bfe545e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:86:f6:92:ef:19:17:b7:4f:22:fe:98:ce:
95:8a:fa:7a:d1:4e:06:a8:0c:f4:a4:dd:cc:9d:07:
ea:57:32:cc:14:da:63:da:62:cb:d8:50:76:7c:76:
bc:ec:25:87:98:db:76:ef:79:13:3e:53:de:2e:4a:
93:29:5b:35:f0:f2:82:8f:74:f8:87:d9:cb:b8:9f:
81:60:93:0d:a7:b7:09:c5:fb:48:ed:46:19:3d:d1:
77:25:ba:c3:99:dc:5f:c9:a1:04:65:77:9c:cc:cc:
d2:7b:ae:46:c4:bb:d9:fb:f2:0e:86:02:cb:16:ad:
f3:8d:f9:5f:44:0e:7f:d4:fd:43:3b:3b:36:86:ab:
a7:02:5e:5b:31:b2:b3:8f:ba:61:af:1d:33:a6:36:
03:50:63:0d:e9:fc:67:56:93:d3:2c:79:9c:5c:4d:
17:66:1c:ed:c7:14:29:76:6c:5f:66:b7:c2:f0:60:
85:33:bf:62:26:4a:37:97:c8:04:2f:92:54:88:55:
e6:cf:a2:84:b3:ea:ef:01:ca:75:d8:41:9f:22:f1:
9d:e5:25:44:62:ab:a6:08:fe:48:10:aa:ca:8b:69:
54:ba:d4:29:4e:07:a4:2f:7e:88:f8:27:bb:95:74:
ed:59:4c:69:5b:d5:d3:2a:34:58:22:e2:4f:20:45:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:0E:D6:E8:89:81:E9:C3:49:06:F1:A1:96:39:70:BF:E5:45:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wEYO1uiJgenDSQbxoZY5cL_lReM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:00:c1:15:ad:48:b7:5d:cd:c5:24:6a:2e:d2:1e:a4:15:f2:
a0:08:ba:37:6c:56:d4:22:c4:b7:39:4c:1e:ed:5c:09:0e:6c:
44:73:70:6a:93:46:ae:24:79:b1:c3:94:9f:76:7f:92:54:b4:
70:29:01:c2:d0:f3:2c:71:d3:3e:f7:91:bb:96:bf:1e:fc:4b:
ff:c3:78:2b:ad:58:05:ac:1b:6a:ac:37:d0:71:71:2f:57:f5:
00:3d:c4:28:77:34:fc:af:26:8c:86:61:d0:47:21:35:31:92:
da:19:13:04:43:3a:2c:33:7c:ea:78:98:e9:a5:e5:1d:62:32:
e9:ba:69:96:b8:f0:56:4d:ec:18:19:11:ce:63:e3:6b:21:70:
e1:18:7c:77:79:68:6a:d5:f2:dd:cd:78:26:b7:7f:74:0d:e6:
c9:2e:13:45:63:01:62:91:31:c7:1b:a8:ec:cb:c2:37:d8:40:
d6:51:4c:ab:47:b4:47:df:90:54:bf:10:05:a1:77:55:75:65:
08:c2:9e:16:24:80:98:8c:d4:6d:1d:7b:b6:7e:55:3f:ef:8d:
90:fe:a4:72:de:d7:e0:51:a3:e5:40:ed:1c:2a:51:aa:25:52:
72:54:db:0e:31:c1:b1:0f:a7:9c:f5:22:f1:36:79:9d:e7:49:
62:b6:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:52:18 2025 by rpki-client